I just discovered that if you put in www at the start, it works even with https so it's possible the SSL certificate have been registered to <
www.bimcomponents.com> instead of just <bimcomponents.com>
Either way, since we don't input credit card (or any other sensitive) information at that site, I wouldn't worry too much about it.